$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (raw, json) Hash identifier: zsesejcFFyP62LeF02Um0DzzHwP7S2tFrMVRRgxJ++Q= Subject key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 4AA1FEC033AC54CE0FD2AD9F4CE6BCB8D896D466 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Manifest: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft caRepository: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 10:27:26 +0000 Certificate not after: Mon 30 Jun 2025 10:32:26 +0000 Subordinate resources: IP: 212.117.48.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 16:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a1:fe:c0:33:ac:54:ce:0f:d2:ad:9f:4c:e6:bc:b8:d8:96:d4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jul 1 10:27:26 2024 GMT Not After : Jun 30 10:32:26 2025 GMT Subject: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:5b:1d:b7:fa:da:86:d9:aa:1d:2c:2b:48: 7f:75:5b:6b:59:aa:a3:9d:10:34:eb:44:a3:79:f6: c3:15:a9:e0:6f:d7:4e:d1:fb:00:0e:87:9a:26:ea: b9:db:bd:36:a2:d7:fb:5d:3a:50:e1:09:b0:79:6e: d9:f1:bf:d0:cd:82:57:ea:fd:2d:b4:f8:20:be:0f: ed:30:43:8b:e1:35:fd:67:25:99:7f:52:0e:71:96: 22:79:2a:e7:82:6d:36:3a:e4:c1:fd:e4:29:5b:a9: cd:e2:45:f8:36:f4:3b:08:ea:74:a0:8d:77:e3:a2: 49:0a:c1:e0:77:c0:2c:02:92:14:6b:b7:84:4b:31: 30:ce:07:6e:62:67:96:db:e5:00:43:9f:6f:92:69: de:ff:dc:32:ff:55:7d:91:56:37:63:2a:3a:4b:68: 7a:0b:cf:2a:00:90:63:6f:44:e6:be:e3:6a:68:30: 29:6a:32:cd:19:ea:41:10:da:c3:35:14:87:ef:57: 47:9b:01:37:8d:a0:3f:d3:8b:8d:1a:47:aa:aa:90: bf:19:30:69:1b:a2:17:60:91:9f:f3:c4:63:40:69: ff:47:5b:d7:5e:d1:27:72:7c:eb:d3:94:31:42:21: 64:43:44:13:de:4e:74:f3:98:96:06:e6:cd:2c:7e: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.117.48.0/20 Signature Algorithm: sha256WithRSAEncryption a3:34:14:aa:91:c9:e3:61:0b:4d:d5:5e:49:f1:29:c7:12:83: 11:33:8c:52:70:a5:e4:13:e5:fd:5d:c1:23:cc:18:0f:fe:9d: aa:5d:1b:3d:06:8c:eb:e3:d8:ff:23:c0:1d:2c:f1:8a:9f:a1: 98:ec:48:ad:1a:11:92:2a:ce:0a:62:ce:fe:3f:1b:2c:00:5b: 54:a5:a4:d7:5d:a5:6b:d5:d9:81:c5:f6:a6:39:5a:a1:6b:80: a7:4b:bd:c1:3e:d2:db:70:f9:df:08:89:de:2c:e3:4e:a1:61: bd:b8:71:9d:4c:a1:cb:84:49:d3:3e:7b:01:3e:5a:27:7b:45: 60:62:35:32:01:fa:c2:e3:f8:07:2b:d9:f0:9a:64:e4:f8:b8: 9c:48:7f:1c:91:31:04:ed:b6:a8:e7:25:19:42:de:7c:70:09: ac:10:10:47:74:60:fe:8d:cf:01:e1:7d:7e:dc:92:76:3d:35: 3d:2e:e8:f1:46:41:42:4e:80:0e:02:80:d4:c9:a5:f0:fc:a2: 88:f9:2a:a9:24:88:8a:c4:50:b1:4a:79:3d:e4:1f:71:2a:ac: 7c:2b:9b:42:97:20:f1:ef:d7:b4:a6:06:2d:54:dc:d4:33:33: ff:59:bb:f8:11:e5:e1:4b:6b:e6:bb:fb:2e:23:05:c3:35:24: df:7f:a5:a0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSqH+wDOsVM4P0q2fTOa8uNiW1GYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI0MDcwMTEwMjcyNloX DTI1MDYzMDEwMzIyNlowMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFC MjY1Q0E2N0MwQkQ2MEQ0Q0Y5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMoWx23+tqG2aodLCtIf3Vba1mqo50QNOtEo3n2wxWp4G/XTtH7AA6Hmibq udu9NqLX+106UOEJsHlu2fG/0M2CV+r9LbT4IL4P7TBDi+E1/WclmX9SDnGWInkq 54JtNjrkwf3kKVupzeJF+Db0OwjqdKCNd+OiSQrB4HfALAKSFGu3hEsxMM4HbmJn ltvlAEOfb5Jp3v/cMv9VfZFWN2MqOktoegvPKgCQY29E5r7jamgwKWoyzRnqQRDa wzUUh+9XR5sBN42gP9OLjRpHqqqQvxkwaRuiF2CRn/PEY0Bp/0db117RJ3J869OU MUIhZENEE95OdPOYlgbmzSx+nUECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFXnnB1gsS5Y0SGyZcpnwL1g1M+SMB8GA1UdIwQYMBaAFBI0 XxFaxLYqUfUnTFTIHoZGO9C6MA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8w LzEyMzQ1RjExNUFDNEI2MkE1MUY1Mjc0QzU0QzgxRTg2NDYzQkQwQkEuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0Vq UmZFVnJFdGlwUjlTZE1WTWdlaGtZNzBMby5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMw LTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8xLzU1RTc5QzFENjBCMTJFNThE MTIxQjI2NUNBNjdDMEJENjBENENGOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATUdTAwDQYJKoZIhvcNAQELBQADggEBAKM0FKqRyeNhC03VXknxKccSgxEzjFJw peQT5f1dwSPMGA/+napdGz0GjOvj2P8jwB0s8YqfoZjsSK0aEZIqzgpizv4/GywA W1SlpNddpWvV2YHF9qY5WqFrgKdLvcE+0ttw+d8Iid4s406hYb24cZ1MocuESdM+ ewE+Wid7RWBiNTIB+sLj+Acr2fCaZOT4uJxIfxyRMQTttqjnJRlC3nxwCawQEEd0 YP6NzwHhfX7cknY9NT0u6PFGQUJOgA4CgNTJpfD8ooj5KqkkiIrEULFKeT3kH3Eq rHwrm0KXIPHv17SmBi1U3NQzM/9Zu/gR5eFLa+a7+y4jBcM1JN9/paA= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org